google-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Google Calendar skill ingests external calendar events and meeting invitations from Google Calendar, which can contain outsider-authored text in summaries, descriptions, and attendee lists.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill relies on an external OAuth cloud function hosted at geminicli.com for authentication and token refresh, representing an unverified third-party operational dependency.